All Posts

Thank You, ANUSFRAGGER: How Attacking My Partner Saved Microsoft

Hall of Shame: FireSuper - GitHub Supply Chain Sleeper Account

They Picked the Wrong Day: Supply Chain Attack on Active Threat Intel Researcher

UNC6395: I Told You So (The Breach That Won't Stop Breaching)

When Attackers Have Better OpSec Than You (The Death of HTTP)

When Dropping Your Shields Reveals Attack Infrastructure (The SSL/TLS Honeypot Strategy)

We Don't Discover Threats. We Prove We Can Reproduce What Enterprise Systems Detect. (And That's Better.)

I Tracked Who's Consuming Our Free Threat Intel Feed. The Results Got Creepy.

When Microsoft, Google, and Cloudflare Download Your Threat Intel (And You're Just a Guy in Minnesota)

Our STIX 2.1 threat intelligence feed started throwing 500 errors on every request. Root cause: two temporal dependency bugs where variables were used before th

--- title: "Is Anyone Actually Using Our Free STIX Feed? (Spoiler: Yes)" date: 2025-11-19 author: Patrick Duggan category: Threat Intelligence tags: [STIX 2.1,

--- title: "The SOC Triad: Free Threat Intelligence for Everyone" date: 2025-11-19 slug: the-soc-triad-free-threat-intelligence-platform excerpt: "Detection Rul

While GitHub's Git operations were experiencing a major outage (20:39 UTC, resolved 21:36 UTC - 57 minutes), we shipped two production-ready features for our se

Zeno's Paradox for Assholes: Why 94% Precision Beats "99.9%" Marketing BS

When Half the Internet Went Dark: The Cloudflare Outage That Proved Pattern #30

Attack from the Dark Side of the Cloud: Meet Reptilian Pope on T-Rex

Haven't We Met Somewhere Before? Operation Déjà Vu

Attack from the Dark Side of the Cloud: Meet Reptilian Pope on T-Rex

Meet NucleiDeezNutz: The Professional Who Exposed Our Surveillance Bug